📦 Forumwp

This vulnerability allows attackers to execute arbitrary code through PHP object injection by exploiting unsafe deserialization in ForumWP WordPress plugin. All WordPress sites running ForumWP version...

This vulnerability allows authenticated WordPress users with subscriber-level access or higher to escalate privileges by changing administrative user email addresses via an insecure direct object refe...

This vulnerability allows unauthenticated attackers to inject malicious scripts via specially crafted URLs in the ForumWP WordPress plugin. When victims click on these links, the scripts execute in th...